Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: 4GnmaBHNnWe0OoJKsKUx8TA9f8NEIQCYIZTf9qwjmfQ=
Subject key identifier: 97:3E:55:24:A0:11:64:32:F1:BC:AE:32:A0:17:F6:8A:D2:D4:FD:52
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 01A12AD6B8A32F563BBE57ED3CDCE35F8077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0DCA
Signing time: Sun 11 Oct 2026 12:01:17 +0000
Manifest this update: Sun 11 Oct 2026 12:01:17 +0000
Manifest next update: Mon 12 Oct 2026 12:01:17 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: dCIC9ZjvwxmGs4I/tF5XqBIAKwZcmTmz5jR/a4gzVtk=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:b8:a3:2f:56:3b:be:57:ed:3c:dc:e3:5f:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Oct 11 12:01:17 2026 GMT
Not After : Oct 12 12:01:17 2026 GMT
Subject: CN=973e5524a0116432f1bcae32a017f68ad2d4fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:e9:c8:22:62:3d:1c:77:f9:12:78:b7:83:
7f:bd:51:d4:e0:4f:42:66:7c:6d:ba:5f:94:4c:c7:
fe:06:a5:03:53:01:ad:25:bd:5d:1a:77:c7:11:af:
5a:a7:57:32:f3:dc:61:58:d8:52:f1:9d:40:6c:ce:
f7:fb:eb:87:a3:b0:35:98:ea:0f:47:39:8b:9d:fb:
42:58:6b:84:e9:de:fe:a4:03:b9:7a:1b:51:e2:32:
cf:a5:a2:e7:6e:92:91:be:6e:f4:5f:15:ac:cd:a2:
97:e8:22:50:80:51:8d:a8:69:59:e2:5b:5e:9f:f8:
a3:0d:7b:f1:ad:8a:87:14:48:e3:21:75:d6:57:3a:
cf:96:1d:48:1e:7d:04:72:97:38:3b:b3:78:18:28:
76:d2:f7:9c:3f:cb:87:73:f5:40:43:15:05:ca:2a:
c4:a0:4f:54:b4:47:be:bb:b2:51:32:3b:44:e1:29:
d2:ea:44:71:a6:32:2f:af:c0:5e:6e:10:34:96:6e:
04:ab:ef:7d:82:64:a2:c9:6b:fd:b2:9a:29:03:07:
e6:e7:6a:6c:1e:84:78:84:44:f8:aa:0f:c8:73:62:
ed:36:95:78:d0:b5:f6:39:37:25:8d:0f:dd:6e:c0:
be:13:dc:e8:c2:f3:ae:54:46:8b:bf:bd:93:5b:f1:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:55:24:A0:11:64:32:F1:BC:AE:32:A0:17:F6:8A:D2:D4:FD:52
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9d:f0:16:d1:e8:d8:15:75:f4:dc:90:39:87:7e:7d:bc:79:
2c:b8:71:1b:86:fd:2b:29:3c:a0:f8:28:e4:7c:1a:59:20:2d:
43:e1:3a:6e:9d:c4:25:6a:b0:10:99:0a:d0:08:9e:56:e4:25:
bd:fe:ab:97:7e:3e:e3:9f:8c:c1:a4:a3:9d:78:2e:10:8d:50:
75:5a:f6:a5:e2:ab:6e:ff:e7:97:e4:9c:8e:46:1c:72:4d:ca:
f9:95:d7:15:27:ca:4a:fd:fa:1f:72:eb:c6:6f:96:50:d3:1b:
83:4c:3b:3c:16:62:e5:40:e3:43:bb:17:82:23:63:21:a9:e0:
df:08:74:66:b4:4f:10:22:3e:0f:9c:40:2e:aa:7b:94:e4:f0:
7d:da:a9:44:8e:54:7a:e7:98:13:e5:4e:c9:25:3d:fa:cf:fb:
ee:85:92:dd:c6:5c:a5:1f:e3:7d:a5:d5:17:58:05:e3:95:93:
bf:f9:48:4c:cb:4f:38:0f:34:bb:31:7e:ee:63:1f:db:9a:53:
93:f0:1e:13:52:d1:30:99:1b:42:60:04:4b:11:ab:ea:fb:cd:
d1:d1:df:e1:27:f6:38:21:d3:b4:ba:e4:46:24:d6:3b:2e:05:
25:93:70:dc:b5:b2:1c:e3:69:95:df:07:8c:ee:b4:08:69:84:
c0:85:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:32:36 2026 by rpki-client